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(57) Abstract 

A packet processing method and apparatus efficiently process a binary data packet based upon information contained in 
the header portion (20) of the packet The method and apparatus employ a binary tree search method for determining ranges of 
key elements of the packet and associating with each of the ranges a user supplied data and filter mask. The binary search process 
employs a unique binary tree storage structure which both conserves storage memory and enables efficient processing to reach a 
final node of the binary tree decision table. Nodes can be added or deleted from the table by the user as the data packet process- 
ing needs change. 
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DATA PACKET PROCESSING METHOD AND APPARATUS 

The invention relates generally to the 
transmission, processing, and forwarding of data 
5 communications packets, and in particular, to the method 
and apparatus for processing the packets at an 
intermediate node during transmission from source to 
destination. 

Pflcftgyomifl a£ the invention 

10 The process of transmitting data packets from a 

source to a destination typically requires at least one 
intermediate forwarding node. The equipment at the 
intermediate node, often called a router or a bridge, 
receives the data packet, examines or analyzes it, and 

15 forwards it on to a next node or destination on the 

network as is appropriate. The process of examining the 
packet typically employs table look-ups, and the process 
of demultiplexing the packet, and analyzing, filtering 
and forwarding the packet headers, requires a substantial 

20 amount of table look-up. Their frequency, and the 

overall computer processor time expended for those tasks, 
requires substantial processor capability. Accordingly, 
methods have been employed to reduce the CPU 
requirements, and, accordingly, improve throughput 

25 through the node and maintain effective costs. 

It is therefore an object of this invention to 
provide a yet further improved throughput through a 
router or bridge, and simultaneously reduce the need for 
CPU processor time while maintaining memory requirements 

30 and other hardware needs at a minimum. Other objects of 
the invention include high reliability, the capability of 
handling complex packet headers, and effectively 
providing filtering results simultaneously with the 
destination address determination. 
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. Summary Sf £b£ Invent i ?n 
The invention relates to a method and apparatus 
for processing binary data packets which have an 
information containing portion and a data containing 
5 portion. The method features the steps of creating and 
storing a t least one binary tree decision table which has 
a plurality of non-f inal nodes and a plurality of final 
nodes. The table represents a binary decision tree 
structure. The method further features the steps of 
10 processing the information containing portion of the data 
packet to be processed using the binary tree table for 
determining the processing to be used for the packet, and 
thereafter processing the packet in accordance with the 
processing results just obtained. 
15 The apparatus and method of the invention are 

particularly advantageous in using the binary tree search 
for determining whether a particular key value is 

Incut?^ " ^ ° f data Values Previously 

20 cent • " ' ^ ln the formation 

20 containing portion of the packet falls within a 

anf!^ alg ° rith * > rovid ~ — * data 

svstl! I"* 8 * d3ta ^ ^ by the PaCket Pressing 
system. The use of the user supplied data does not 

require a priori knowledge of where in the range the key 

25 value is positioned and the binary tree search method 

similarly does not attempt to provide an exact match to 

the key value (except in the special instance where the 

range contains only one value,. Accordingly, as is well 

known in the art, many key values to be searched in a 

"> data packet header need only be associated with a 

contiguous range of data and the described binary tree 

search method and apparatus uniquely provides in an 

efficient manner the "imprecise" match of the key value 

to the range and thereafter associates with that key 
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value the designated user data and filter mask 
information previously provided to the system. 

In particular embodiments of the invention, the 
creating and storing step features the steps of dividing 
5 a storage table or memory into a numbered sequence of 
subarrays, ordering the binary tree structure in a 
dependency order of numbered tree nodes, and storing left 
and right node children of a node numbered w n", and 
stored at subarray "n", at subarrays w 2n" and "2n+l w 

10 corresponding to nodes M 2n n and '^n+l 1 ', respectively. In 
order to achieve better and more balanced processing, the 
method further features the steps of assigning a weight 
to each node which is equal to sum of the weights of each 
of its child nodes "+l w , and thereafter balancing the 

15 binary tree structure whenever the weights associated 
with two child nodes of a common parent node differ by 
more than one. 

The packet processing method further features the 
ability to add and delete nodes from an existing binary 

20 tree structure by modifying the binary tree decision 
table. The method further features, in a particular 
embodiment of the invention, processing the incoming 
information containing portion of a packet by deciding, 
for each non-final node, whether a selected subset of the 

25 portion is greater than a predetermined node threshold 
value and thereafter proceeding to one of the lower order 
right child node or left child node depending on the 
relative values of the subset and the threshold. The 
non-final subarrays thereby store threshold values, and 

30 each final subarray is reached by passing through a 

sequence of non-final nodes. The final node contains an 
information data portion and a filter mask containing 
portion. The described binary tree structure is 
particularly advantageous for searching for a range of 

35 values. 
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20 



25 



30 



35 



There will be times when the input information 
containing portion of the packet to be processed can be 
advantageously segmented into a plurality of information 
subset segments, thereby enabling the segments to be 

5 processed separately. Accordingly, the invention further 
features segmenting the input information containing 
portaon into a plurality of information subset segments, 
processing the segments to determine a filter master 
each segment, and AND'ing the results of each filter mask 

0 with an initial filter mas* to determine the f ina Tf 

iZZ^ f ° r ^ In *~ stances where 

LZT * n9th greSter ttan tte gating word 

length assorted with the process, the invention 

; c!n!r< diVidin9 6aCh Segn6nt ( ° r the ^formation 
. containing portion, into a plurality of subsegments, 

processing each subsegment through the binary tree 
structure as noted above, and AND'ing the filter mask 
results for the subsegments to achieve a final filter 
mask instruction. 

The apparatus of the invention, implements the 
method described above, and typically features circuitry 
for creating and storing at least one binary tree 
decision table having a plurality of non-final nodes and 
a plurality of final nodes. As before, the table 
represents a binary decision tree structure. The 
apparatus further features circuitry for processing the 
information containing portion of the data packet 
segmenting it if necessary, using the binary tree 'table 
for determining the processing to be used for the packet 
The packet is then processed in accordance with those 
processing results, where necessary, circuitry is 

taT er .T Vided ' ° r e " i0i6ntly 8t0rin * the Wnary tree 
table balancing the table as necessary, adding and 

deleting nodes, passing through the binary tree in an 

ordered fashion using the threshold values stored in, in 
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association with each node, the memory subarray, and 
segmenting the information containing portions either due 
to length of the portion or the separation of related 
information, into subsegments of the information 
5 containing portion, which subsegments are then serially 
processed. 

Prlef Description o£ S&e Drawing 
Other objects, features and advantages of the 
invention will be apparent from the following description 
10 taken together with the drawings in which: 

Figure 1 is an illustrative network including 
source/destination and analyzing/ forwarding nodes of a 
typical network; 

Figure 2 illustrates the structure of a typical 
15 data packet to be analyzed and operated upon in 
accordance with the invention; 

Figure 3 illustrates a decision tree structure in 
accordance with a preferred embodiment of the invention; 

Figure 4 illustrates a memory structure accordance 
20 for storing and implementing the binary tree structure of 
Figure 3 in accordance with a preferred embodiment of the 
invention; 

Figure 5 illustrates the deletion of a node from a 
binary tree structure; 
25 Figure 6 illustrates the insertion of a node in a 

decision tree structure; 

Figure 7 illustrates the balancing of a binary 
decision tree in accordance with a preferred embodiment 
of the invention; 
30 Figure 8 is a flow chart illustrating operation of 

the analysis and filtering system in accordance with the 
preferred embodiment of the invention; and 

Figure 9 is a hardware configuration capable of 
implementing the preferred embodiment of the invention. 
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Description , fi£ tlie Preferred Embodiments 
Referring to Figure 1, a data communications 
network 10 can have a plurality of source, or 
destination, nodes 10a, 10b, . . . , ion and a plurality of 
5 intermediate connecting or forwarding nodes 12a, 12b, 
12m. The various nodes, whether they are 
source/ destination nodes, or intermediate/ forwarding 
nodes, are interconnected in various circuit patterns by 
interconnecting data links 14a, 14b, I4p. in this 

10 data transmission environment, therefore, a data packet 
sent, for example, from a (source) node 10a to a 
(destination) node lOd, can traverse a plurality of 
different paths 14, depending upon, for example, the 
availability of the paths, the cost of the various paths, 
15 the speed of the various paths, the operability of the 
paths, etc. 

In accordance with the preferred embodiment of the 
invention, the data sent from a source node to a 
destination node, is transmitted in the form of a data 

20 packet 16. Referring to Figure 2, a typical data packet 
16 is transmitted by appending to the data portion 18 of 
the packet, a header portion 20, and adding at the end of 
the data packet, a trailer portion 22. The header 
portion can contain any of a number of different items of 

25 information, which, according to the protocol being 
employed, will appear in known positional locations 
within the header. The header information may include, 
for example, the address of the destination node, the 
address of the source node, a preferred path to take, 

30 instructions with regard to timing of the data and 

forwarding the data in accordance with various filtering 
operations. The trailer portion of the data packet may 
include, for example, a CRC check to insure accuracy and 
integrity of the data packet once it is received. 
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In accordance with a preferred embodiment of the 
invention, the header portion of the data packet is 
decoded so that the intermediate or forwarding node 12 
has sufficient information to forward (or not forward) 
5 and otherwise process the data packet in an appropriate 
manner over the appropriate paths. For example, an 
intermediate or forwarding node 12b has the option of 
passing a data packet over path 14d or 14e when, for 
example, the destination is node lOd. The header 

10 information being provided can simplify that choice or 
provide a command which eliminates the ability of the 
node to "choose". 

In accordance with the illustrated embodiment of 
the invention, the header information can be quite long, 

15 for example, over several hundred bits of data. 

Accordingly, the decoding process for the header can be 
either long or tedious, or both, and can take substantial 
CPU time, which otherwise could be used for more 
"profitable 91 functions. In any case, the passage of the 

20 packet through the intermediate node can be accordingly 
delayed. In accordance with the present invention, a 
binary tree structure is employed to speed the data 
packet through the intermediate node 12 to its eventual 
destination. The binary tree structure operates, in a 

25 simple manner, to process and analyze the incoming data 
packet, filter it, and thereby, if appropriate, pass it 
on to a next node. 

In accordance with the invention, therefore, a 
specialized and highly optimized table look-up service is 

30 provided for demultiplexing, forwarding, and filtering 
the data packet. The lork-up table method implements, 
preferably in a software embodiment, an associative 
memory that stores the data identified by various "keys"/ 
such as the destination and source addresses, so that 

35 during a look-up operation, the information can be 
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scanned until a match of the key being processed is 
obtained. While a linear search could be implemented, it 
is far too slow to be of practical use. in particular 
since the keys which are to be supported can be of 
5 arbitrary length (but typically are contiguous) , the 
linear search does not provide a practical solution, in 
addition, it is typical that a key has a range of values 
each of which causes the same filtering operation (s) to ' 
take place. 

10 Accordingly, in accordance with the preferred 

embodiments the invention, a unique binary tree table 
i. employed to effect the look-up service. i„ accordance 
with the illustrated preferred embodiment, key fields 
within the packets are defined using bit offsets from a 
15 convenient reference point, for example, the beginning of 
the packet. The header keys can have variable formats, 
for example, IP options, and additional reference points 
may be needed. The bit offsets are stored in the table 
where they can be referenced during the table search, 
to The look-up table binary tree is a uniquely adapted to 
searching for ranges of data, and to apply user supplied 
information to the entire range, m this manner, a key 
incorporating, for example, IP options, can be 
advantageously and quickly decoded and a range of values 
5 will provide a common, user-identified, result. 

The look-up table can directly deal with at most 
only 32-bit contiguous keys in accordance with the 
illustrated embodiment of the invention. Smaller, that 
is, shorter length keys, are always preferably left 
0 adjusted and larger, but contiguous keys are 

transparently divided or chopped into 32 bit fragments by 
system interface software routines. Non-contiguous keys, 
which are useful for performing arbitrary filtering 
require a more intimate involvement with the application, 
> that is, the look-up table must be segmented so that the 
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first look-up stage processes one 32 bit key fragment or 
subfragment, and thereby results in a reference to a 
second stage look-up table, and so on. The final look-up 
result returns the user data supplied when the entry was 
5 installed in the table. 

The left shifting of the shorter key lengths is 
equivalent to providing a range of values defined by the 
most significant bits of the left shifted key, with the 
lover order bits, the bits shifted into a 32 bit word, 

10 being in effect "don't care" bits. The described binary 
tree search is particularly adapted to searching for a 
range of values set up by the left shifted key in 
accordance with the invention. 

There is, however, one problem with this approach. 

15 The second, third, and further levels of table will 
occupy exponentially growing space within the memory. 
Thus, for example, if a first level table has 1,000 
entries pointing to 1,000 second level tables, each with 
1,000 entries, it becomes clear that the process will not 

20 adequately work because the second and subsequent set of 
tables must be shared among many, and preferably all, 
entries in preceding level tables. The table sharing, 
however, loses information about earlier look-up results 
in the process. For example, if all first level entries 

25 pointed to the same second level table, the first level 
look-up entry would have only a one bit result: either 
the entry was found, in which case it would go to the 
second table or not, in which case the packet would be 
dropped. This is insufficient to implement any rational 

30 filter. 

Thus, for a header made up of a plurality of key 
values 22a, 22b, 22c, which may correspond, for example, 
to source address, destination address, and protocol 
type, the system must decide how the packets will be 
35 processed. In accordance with a preferred embodiment of 
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the invention, a binary tree table approach is employed, 
in which the decision process is reduced to "simple 
binary decisions" based upon the various keys 22 in the 
packet, a typical look-up binary tree structure is 
5 illustrated in Figure 3, in which, starting from a root 
node 24, the tree structure emmanates. The binary tree 
structure provides that for each parent node, such as 
root node 24, there exists a left child node such as node 
26 and a right child node, such as node 28. This 
10 procedure continues for the entire tree, so that, for the 
illustrated embodiment, further left and right child 
nodes are provided and labelled 30, 32, 52. m 

accordance with this embodiment, for each key of the 
header, the system makes binary decisions for 
15 determining, at the various nodes, whether a particular 
range of values, or a specific value (a range limited to 
one value) exists. The process thus provides for passing 
through various non-final nodes in the tree to a final 
node at which a selected range or value is determined to 
20 exist. Beyond this final node, there are no further 
nodes and the final node provides both a filter mask 
instruction word, as well as user data. The filter mask 
instruction word, in fact a filter mask, is a 
specification word, each bit of which is associated with 
25 a different operation. Thus, one bit may provide for 
dropping the packet and not passing it forward, while 
another bit will provide for a different action. The 
apparatus can thus, once the final node has been 
determined, take the filter mask and perform operations 
30 upon the packet data in accordance with the bits set 
therein. 

The resulting -look-up table- thus provides for a 
method for determining whether a range of values, or a 
specific value (a range limited to one value) has been 
35 found and, when found, the filtering operation to be 
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applied to that range of values* Accordingly, each non- 
final node thus represents, itself, a range of values, 
the left child node of which represents a lower portion 
of the range and the right child node represents the 
5 upper portion of the range. At the end of the search 
process, the user data and filter mask of the final node 
are thus applicable to all values in the range 
represented by the final node. 

If the operation upon the packet is determined by 

10 a plurality of keys, rather than one key of the header, 
there can result a sequence of tree searches with a 
resulting sequence of filter mask values for determining 
operations upon the data packet. In this instance, each 
of the various masks can be advantageously and, in the 

15 preferred embodiment are, "AND'ed" together, so that only 
bits set for each and every filter mask will survive and 
be effective. In a properly constructed binary tree 
structure, the operations will not be self -contradicting. 
The length of the filter mask is arbitrarily set 

20 at 32 bits, each of the bits being used for filtering in 
the illustrated embodiment. In fact, in other 
embodiments of the invention, the length of the mask is 
arbitrary, and one or more bits could be set aside, for 
example the 32nd bit of the mask could be reserved for 

25 normal forwarding. 

In a preferred embodiment of the invention, and to 
avoid using excessive memory, the binary tree table can 
be stored as a "look up table* 9 as follows. First, as 
illustrated in Figure 3, the nodes are numbered, in 

30 sequence, so that the root node is numbered "1", its 
children are numbered l, 2" and n 3 w for the left hand and 
right hand child, respectively, and each successive node 
in the tree, node n, is numbered so that its children are 
numbered 2n and 2n+l for the left and right child nodes, 

35 respectively. In this manner, referring to Figure 4, a 
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unigue and compact struetur. is provided t „ st 

TrjT „ l0Ok - UP taU - 1B «-* ^nerax forn 
each of the -numbered. no(jM( ls ^ 

o^r? r ^ SeqUe " Ce - In * Particular eabodL* 
!f*f e T" 1 " 0 "' — «^r,7 associate with a nT 
final noa. need only contain . threshold value, „ that 
if the value of the key i. greater than or equal to tt. 

10 otherwise, the left child nod. is selected. In this 

to store the binary tree nodes. 

order J" a ,. Pr,f * rred of the invention, in 

15 ^ „ " iClent ^"tion, the tree is 

is balanced wherein each final nod. of the tree is given , 

"weight- of -o- and .ach non-final nod. of the J„U 

TIT ChUdrW " > lM *• ™« thl 

s - --roV^wi^r^ - 

difference in the weight greater than l. such a 
balLcT V* lllMtrated *» «9°r« » and 7B. such 
'5 e f I= L „ ! I*,.?" binary ttM ' P«*icul«l y 

Of ^ty^' IMr °? fUneti °" value 
»Li»°, ^ "«»in«i. This efficiency results by a 

value, have . unifor. probability -^."1^ 

in accordenc. with a preferred enbodiront of «,. 
Invent on, when the h..a.r portion is ccposeTof . 

£££ °ff dl£feteBt ^ °< — ' « a«ect th. 
SeT^' ^ t0 "* I " rto ™' 1 °Pon th. data packet 

th. header keys can be separately selected, thus 
• "gating the header, and each of th. k .ys can be 
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processed through a separate binary tree structure to 
determine the filter mask appropriate to that key to be 
applied to the data packet. The resulting filter masks 
are AND'ed together to provide an overall filtering 
5 capability for processing that data packet. In addition, 
in accordance with the preferred embodiment of the 
invention, the resulting filter value is also AND'ed with 
a predetermined limited number of filter options, 
designated by a 32 bit preset filter word, which limits 
10 the number of filter operations which the user has 
designated as applying to that binary tree decoding 
process . 

In addition, since the keys themselves, in this 
illustrated embodiment of the invention, are limited to a 

15 32 bit value, the invention provides for segmenting, or 
subsegmenting any key or segmented portion of the header 
so that the various portions of the header are handled 
separately in 32 bit "chunks". For any portion of a 
header less than 32 bits in length, in accordance with a 

20 particular preferred embodiment of the invention, the 
remaining portion of the key is left shifted to the most 
significant portion of the 32 bit word representing the 
key subsegment. The results of each of the segmentation 
analyses in accordance with the invention are thereby 

25 AND'ed together to provide the resulting filter solution 
for analyzing and enabling processing of the packet. 

Further, in accordance with a preferred embodiment 
of the invention, there is a provided a method for adding 
or deleting nodes from the tree structure of Figure 3, 

30 and thereby reconfigure the memory configuration of 
Figure 4. In accordance with this aspect of the 
apparatus, referring to Figure 5, there are deleted nodes 
numbered 4, 9, 18 and 19. In accordance with the process 
of node deletion, the nondeleted child nodes of each 

35 deleted parent replace the parent in this structure and 
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each of the child nodes of the now new "parent- are 
renumbered in accordance with the invention. Thus, i„ 
Figure 5, node 4 and its left hand children are deleted, 
in Figure 5, the nomenclature used within the node 
5 defining circle is "node number: threshold value" 

The addition of a node is illustrated in Figure 6 
in which a new node has been inse rted, at node dUft ' 
the change in threshold value at node 4. m this 
example, therefore, previously "final" nodes 8 and 9 
10 provide new threshold decision values. 

^ inSerti ° n ° f nodes topically results in the 
splitting of ranges (that is the addition of a new range 
boundary,, whereas the deletion of nodes typically 
represents the combining of two or more existing ranges 
15 and hence then elimination of one (or more, range 

boundaries (that is, the merger of smaller ranges,. The 
Particular examples of Figures 5 and 6 also illustrate 
the use of a special threshold values, "0" in the 
examples, to denote a final node . 
20 Referring to Figures 7A and 7B, there is 

InT^tV T7 1 balanCin? rearran ^- 1, in which, 

of noTr ^ ^ iS " t0 ° ^ on to « branch 

of node 1 and, accordingly, is "rebalanced" i„ Pigure 7B 

25 Z*r \ SOm * ° f MWeight " £r ° n the ^ handle of 

Te T\ ^ ri?ht ^ Side ° f «- Note that 

the two trees of Figures 7A and 7B are equivalent to each 
other, but that the weight associated with the child 
nodes is now "balanced". 

30 d. t . h T ' lnal n °' 1 ' °' °" als ° Pt°vifs user 

» data vhxoh can be employed as required for effecting user 
instructed Rations. ^ icany , ^ ^ * ~ 

UP ° n ' Ut " 1 "» t8 be by the 
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Referring to Figure 8, there is illustrated an 
overall flow chart illustrating total operation of the 
system of Figure 9, in accordance with the illustrated 
embodiment of the invention. 
5 Referring to Figures 8 and 9, the implementation 

of the invention is preferably performed in accordance 
with a hardware/software embodiment* As will be apparent 
to those skilled in the art, the various elements of the 
invention can be embodied solely in hardware, solely in 

10 software or firmware, or in a combination of the two, as 
is desired for the particular application and the related 
throughput and costs associated therewith. 

In accordance with the illustrated embodiment, a 
central processing unit 100 controls operation of the 

15 packet forwarding apparatus 102 and initially receives 
user input data, typically from a keyboard input device 
104 (although other input devices can be employed) to 
define the binary decision tree as indicated at 106 of 
the operational flow chart (Figure 8) . Once the binary 

20 decision tree (such as that of Figure 3) has been 

defined, the CPU begins operation and creates and stores 
a look-up table (corresponding to Figure 4) in memory, 
which will be used to process incoming packets. This is 
indicated at 108. The decision tree table is stored in a 

25 memory 110, which can be, and preferably is, RAM. 

The system is then ready to receive, analyze and 
process, and forward incoming data packets. The system 
waits, at 112, for a packet to be received. The received 
packet is available in an input buffer 114, operating 

30 semi-autonomously tinder the control of the central 

processing unit 100. Under the control of the CPU, in 
this illustrated embodiment of the invention, the various 
keys available in the header, the locations of which are 
known beforehand by the CPU, are extracted and provided 
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to a key storage memory lie. Packet storage and recovery 
of the header keys is indicated at lis in Figure 8. 

The CPU examines the keys, determines typically fl 
fiCiflri, whether the keys need to be segmented for proper 
5 processing, and, if they do, segmentation is effected at 
120. The CPU thereafter recalls an initial filter mask 
for this packet, which defines and limits the number of 
operations which can be performed on the packet 
(indicated at 122) and thereafter passes the segments, 
10 serially, through their respective binary trees, and 
obtains from each binary tree table both a filter mask 
word and user data. The various filter mask words (32 
bit words as noted in this illustrated embodiment of the 
invention) , are AND'ed together with the initial filter 
15 mask, at 124, to achieve an overall processing for this 
data packet. The CPU thereafter processes the data 
packet in the input buffer in accordance with the filter 
mask data and creates, in an output buffer 126, the 
output data packet, which will then be sent over the 
20 selected data communications path to a next node on the 
network. This is indicated at 128. When the processing 
is complete, as indicated at 130, a next packet can be 
received and processed. 

In this manner, a highly effective throughput and 
25 processing of input data packets can be achieved in 
accordance with the invention, by using the simple 
concept of binary tree searching with the particular 
memory saving features and data packet processing 
concepts embodied in the method and apparatus of the 
30 invention. 

In other embodiments of the invention, a different 
word length can be used without adversely affecting 
operation in accordance with the invention. Further, the 
word length need not correspond exactly to the operating 
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width of either the filter mask, user data, keys or other 
aspects of the invention. 

Additions, subtractions, and other modifications 
of the described embodiments of the invention will be 
5 apparent to those of ordinary skill in the field and are 
within the scope of the following claims. 

What is claimed is: 
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1. 



10 



A method for processing a binary data packet 
having an information containing portion comprising the 
steps of creating and storing at least one binary tree 
decision table having a plurality of non-final nodes, and 
a plurality of final nodes, the table representing a 
binary decision tree structure, processing said 
information containing portion of said data packet to be 
processed using the at least one binary tree table for 
determining the processing to be used for said packet 
and processing said packet in accordance with the 
processing results using said binary tree table 



2. The packet processing method of claim 1 
wherein said table creating and storing step comprises 
the steps of dividing a table storage into a numbered 

15 sequence of subarrays, ordering the binary tree structure 
xn a dependency order of numbered nodes, and storing a 
left and a right node child of a node "n«, stored at 
subarray » n «, at subarrays «2n« and "2n+i». 

3. The packet processing method of claim 2 

20 further comprising the step of balancing the binary tree 
structure prior to said ordering step. 

4. The packet processing method of claim 2 
further comprising the steps of assigning a weight to 

25 !hi^ n ° d ! e9Ual t0 ^ SUB ° f the W6ights of each of its 
25 child nodes plus one, and balancing the binary tree 

structure whenever the weights associated with two child 
nodes of a common node differ by more than l. 

5. The packet processing method of claim 3 
further comprising the steps of adding nodes to an 

30 existing binary tree structure by modifying the binary 
tree decision table, and deleting nodes from an existing 
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binary tree structure by modifying the binary tree 
decision table. 

6* The packet processing method of claim 1 
wherein said first processing step comprises the steps of 
5 deciding, for each non-final node, whether said a 
selected subset of said portion is greater than a 
predetermined node associated threshold value, and 
proceeding to one of a lower order right child node and a 
lower order left child node depending upon the relative 
10 values of said subset and said threshold. 

7. The packet processing method of claim 2 
wherein each said subarray is associated with a tree 
node, each non-final subarray stores a threshold value, 
and each final subarray of said tree nodes, associated 

15 with a final node, is designated by passing through a 
sequence of non-final nodes. 

8. The packet processing method of claim 7 
wherein each final node has a unique predetermined 
threshold value. 

20 9. The packet processing method of claim 8 

wherein said unique value is zero. 

10. The packet processing method of claim 2 
wherein each tree structure has at least one final 
subarray and each said final subarray has data containing 

25 an information data portion and a filter mask containing 
portion. 

11. The packet processing method of claim 10 
further comprising the steps of segmenting said input 
information containing portion into a plurality of 
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information subset segments, processing said segments 
.serially to determine a filter mask for each segment, and 
AND'ing the results of each filter mask with an initial 
filter mask. 

5 12. The packet processing method of claim li 

wherein said segmenting step further comprises the step 
of dividing each segment having a bit length greater than 
an operating word length into a plurality of subsegaents, 
and processing said subsegments through said binary tree 
10 structure. 



15 



20 



13. An apparatus for processing a binary data 
packet having an information containing portion 
comprising means for creating and storing at least one 
binary tree decision table having a plurality of non- 
final nodes, and a plurality of final nodes, the table 
representing a binary decision tree structure, means for 
processing said information containing portion of said 
data packet to be processed using the at least one binary 
tree table for determining the processing to be used for 
said packet, and means for processing said packet in 
accordance with the processing results using said binary 
tree table. 



25 



14. The packet processing apparatus of claim 13 
wherein said table creating and storing means comprises 
means for dividing a table storage into a numbered 
sequence of subarrays, means for ordering the binary tree 
structure in a dependency order of numbered nodes, and 
means for storing a left and a right node child of a node 
M n«, stored at subarray "n«, at subarrays "2n" and 
30 w 2n+l". 
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15. The packet processing apparatus of claim 14 
further comprising means for balancing the binary tree 
structure prior to said ordering. 

16. The packet processing apparatus of claim 14 
5 further comprising means for assigning a weight to each 

node equal to the sum of the weights of each of its child 
nodes plus one, and means for balancing the binary tree 
structure whenever the weights associated with two child 
nodes of a parent node differ by more than 1. 

10 17. The packet processing apparatus of claim 15 

further comprising means for adding nodes to an existing 
binary tree structure by modifying the binary tree 
decision table, and means for deleting nodes from an 
existing binary tree structure by modifying the binary 

15 tree decision table. 

18. The packet processing apparatus of claim 13 
wherein said first processing means comprises means for 
deciding, for each non-final node, whether said a 
selected subset of said portion is greater than a 

20 predetermined node associated threshold value, and means 
for proceeding to one of a lower order right child node 
and a lower order left child node depending upon the 
relative values of said subset and said threshold. 

19. The packet processing method of claim 14 
25 wherein each said subarray is associated with a tree 

node, each non-final subarray stores a threshold value, 
and each final subarray of said tree nodes associated 
with a final node, is designated by passing through a 
sequence of non-final nodes. 
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20. The packet processing apparatus of claim 19 
wherein each said final node stores a unique, 
predetermined threshold value. 

21. The packet processing apparatus of claim 20 
5 wherein said unique value is zero. 

22. The packet processing apparatus of claim 14 
wherein each tree structure has at least one final 
subarray and each said final subarray has data containing 
an information data portion and a filter mask containing 

10 portion. * 



23. The packet processing apparatus of claim 22 
further comprising means for segmenting said input 
information containing portion into a plurality of 
information subset segments, means for processing said 

15 segments serially to determine a filter mask for each 

segment, and means for AND'ing the results of each filter 
mask with an initial filter mask. 

24. The packet processing apparatus of claim 23 

20 IfT! in Said Se9mentln * * eans fur ther comprises means for 
20 dividing each segment having a bit length greater than an 
operating word length into a plurality of subsegments, 
and means for processing said subsegments through said 
binary tree structure. 



WO 94/01828 



PCT/US93/06287 




SUBSTITUTE SHEET 



WO 94/01828 



PCT/US93/06287 



2/8 



CD 
ro 



CD 
CM 



CVI 





>- 


CT 






UJ 















UJ 







>- 


IT 






ro 


UJ 












-1 







>- 


ir 


UJ 


-j 


CVI 












>- 


or 




UJ 










o 







ro 



to 



CO 



>- 

UJ 



JO 


>- 


cr 


KE 


-1 



CD' 



CVJ 


>- 


cr 




KE 




_ on 



CM 

ro 



CD' 



CD 
CVI 





>• 


or 




CVI 


UJ 










-J 









>- 


cr 




to 


UJ 










-i 





>- 


cr 




KE 





o 

ro 



CVI 



>- 

UJ 
7" 



cr 





>- 


cr 




UJ 








-i 



u 



cn 


KEY 


cr 
-j 


o 


; 




CO 


KEY 


or 


CO 


y 





(J 



ro 



SUBSTITUTE SHEET 



WO 94/01828 



3/8 



PCT/US93/06287 





0 NOT USED 




1 ROOT KEY 


2 KEY 










3 KEY 












4 KEY 
















5 KEY 


















6 KEY 












7 KEY 














8 KEY 








9 KEY 








10 KEY 






II KEY 






12 KEY 


13 KEY 








14 KEY 




15 KEY 





FIG. 4 



SUBSTITUTE SHEET 



WO 94/01828 



PCT/US93/06287 




SUBSTITUTE SHEET 



WO 94/01828 



PCT/US93/06287 




SUBSTITUTE SHEET 



WO 94/01828 

PCT/US93/06287 




fit IRSTJT! >T= sprrcT 



WO 94/01828 



PCT/US93/06287 



7/8 



DEFINE 
BINARY DECISION TREE 



I 



CREATE AND STORE 
LOOK-UP TABLE IN 
MEMORY 




STORE PACKET 
AND RECOVER 
HEADER KEYS 



120 



I 



SEGMENT HEADER 
IF REQUIRED 



122 



I 



LOAD INITIAL 
FILTER MASK 



124 



I 



PASS SEG MENTS THROUGH 
RESPECTIVE HNARY TREES 
AND "AND" MASK WORDS 



128 



I 



EFFECT FILTERING 
AND FURTHER PROCESSING 



FIG. 8 



^104 

i ^mmm «m « 

USER/ 
KEYBOARD 



I 



106 




SUBSTITUTE SHEE 



WO 94/01828 



PCT/US93/06287 




INTERNATIONAL SEARCH REPORT 



International application No. 

PCT/US93/06287 



A. CLASSIFICATION OF SUBJECT MATTER 
IPC(5) : &ObF *%Oj %0 

US CL : 395/600; 340/825.5 
According to International Patent Classification (IPC) or to both national classificatio n and IPC 

B. FIELDS SEARCHED 

Minimum documentation searched (classification system followed by classification symbols) 
U S. : 395/600; 340/825.5 



Documentation searched other than minimum «Wtt^^t.tj ft n t*% th* <hat tmrh dofumfntt ire inrMH in !hf fir Ids tnirhH 
Computer Science textbook literature 



Electronic data base consulted during the international search (name of data base and, where practicable, search terms used) 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category* 


Citation of rincumnrt, with indication, where appropriate, of the relevant passage* 


Relevant to ekim No. 


Y 


Algorithms, 1983, SEDGEWICK, pages 127-140; 171=200; 
225-231 


1-24 


Y 


US, A, 4,456,957 (SCHIELTZ) 26 June 1984 
(Note Figure 2 and column 1, lines 26-42.} 


10-1 2;22- 
24 


Y 


US, A, 4,593,282 (ACAMPORA et al) 03 June 1986 
(Note Column 2 lines 41-68.) 


10-12; 22- 
24 



n Further document! arc listed in the continuation of Boa C. f""j See patent £unily annex. 



'A* 

•tr 




bur it imtm ■nHhtsd after <m ■ 
4tu md mm tmgoaflici wka*» ^iplii mkm km rmti % 



iwmmm 



d ii 
Iwk 

UriiMmiii 



s m 



Date of the actual completion of the international search 
10 December 1993 


Date of mailing of the international search report 

1 6 DEC 19M 


Name and mailing address of the ISAAJS 
Canuniasteoar of Fatsnu and Trademarks 
Boa PCT 

WashiegkasvDX. 20231 
Facsimile No* NOT APPLICABLE 


Authorized officer P^fcijl^) 

THOMAS C LEB V^f 
Telephone No. 003)305-9600 



Form PCTASA/210 (second aheetXlury 1992)* 



This Pcgo 2!cr,k (uspto) 



This Page is Inserted by IFW Indexing and Scanning 
Operations and is not part of the Official Record 



Defective images within this document are accurate representations of the original 
documents submitted by the applicant. 

Defects in the images include but are not limited to the items checked: 

□ BLACK BORDERS 

□ IMAGE CUT OFF AT TOP, BOTTOM OR SIDES 

□ FADED TEXT OR DRAWING 

□ BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 

□ GRAY SCALE DOCUMENTS 

□.LINES OR MARKS ON ORIGINAL DOCUMENT 



U REFERENCE(S) OR EXHIBIT(S) SUBMITTED ARE POOR QUALITY 
□ OTHER: 

IMAGES ARE BEST AVAILABLE COPY. 
As rescanning these documents will not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 



BEST AVAILABLE IMAGES 




Wo) 



